If you have plain http traffic, then the URL will be in the http.request.full_uri field.
You can see this in action if you download the sample http capture from the wiki and open it in Wireshark and select packet 4 in the packet list, in the protocol details pane, expand the Hypertext Transfer Protocol item and look at the [Full request URI:...]" field.
The field can be added as a column, by right-clicking it and selecting "Apply as Column".
The list you see is the interface list, the capture filter is an edit box to enter a capture filter to restrict the traffic that is actually captured. On a Windows system you won't (normally) have an interface called eth0 as that's usually found on non-windows OSs. The interface is likely to be called something like Ethernet.
You can ignore all interfaces similar to "Local Area Connection* xx", what else is in your list?
Please see the uploaded screen. Https://postimg.cc/JDSLhCwd
I get the four non- Android captures. The others are found after I started a memu play (android emulator). It is also possible I can start a sharepoint to a real android device.
I run a portable version of it.
3.2.7 (v3.2.7-0-gfb6522d84a3a)
Compiled (32-bit) with Qt 5.12.9, with WinPcap SDK (WpdPack) 4.1.2, with Glib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.
Running on 64-bit Windows 10 (1909), build 18363, with Intel® Core™
i5-3230M CPU @ 2.60GHz (with SSE4.2), with 8049 MB of physical memory, with
locale English_Hong Kong SAR.950, with light display mode, without HiDPI ...Asked: 2020-10-02 15:55:13 +0000
Seen: 549 times
Last updated: Oct 02 '20
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
If the pages are https, then you can't do that without breaking the encryption which is difficult. This is why most websites are now using https.
Is that possible if it is starting with only http: ? How detailed the url you can get? Where to get a demo?
I am interested to test that with a simple app I write, if you can show me the way.